ZyXEL Communications P-660H-TX - Manual (Page 14)

P-660H-Tx v2 Support Notes
and source port for the host. To pass IPSec packets, SUA must understand
the ESP packet with protocol number 50, replace the source IP address of the
IPSec gateway to the router's WAN IP address. However, SUA should not
change the source port of the UDP packets which are used for key
managements. Because the remote gateway checks this source port during
connections, the port thus is not allowed to be changed.
13. How do I setup my P-660H-Tx v2 for routing IPSec packets over SUA?
For outgoing IPSec tunnels, no extra setting is required.
For forwarding the inbound IPSec ESP tunnel, A 'Default' server set is required.
You could configure it in Web Configurator, Advanced Setup, Network -> NAT
-> Port Forwarding -> Default Server Setup:
It is because SUA makes your LAN appear as a single machine to the outside
world. LAN users are invisible to outside users. So, to make an internal server
for outside access, we must specify the service port and the LAN IP of this
server in Web configurator. Thus SUA is able to forward the incoming packets
to the requested service behind SUA and the outside users access the server
using the P-660H-Tx v2's WAN IP address. So, we have to configure the
internal IPsec client as a default server (unspecified service port) when it acts
a server gateway.
14. What is Traffic Shaping?
Traffic Shaping allocates the bandwidth to WAN dynamically and aims at
boosting the efficiency of the bandwidth. If there are serveral VCs in the
P-660H-Tx v2 but only one VC activated at one time, the P-660H-Tx v2
allocates all the Bandwidth to the VC and the VC gets full bandwidth. If another
VCs are activated later, the bandwidth is yield to other VCs after ward.
13
All contents copyright © 2006 ZyXEL Communications Corporation.